CISCO-CRYPTO-ACCELERATOR-MIB

All MIBs › CISCO-CRYPTO-ACCELERATOR-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2005-03-08

Category: Cisco Devices, VPN and Security

Description: Monitors Cisco hardware cryptographic accelerator modules, providing statistics on encryption throughput, key operations, and acceleration offload.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-CRYPTO-ACCELERATOR-MIB?

CISCO-CRYPTO-ACCELERATOR-MIB is a Cisco MIB for monitoring the identity, status, activity, and faults of hardware cryptographic accelerator (CA) modules installed in Cisco security devices, such as VPN routers or firewalls with dedicated encryption offload hardware. It exposes discovery-related capability objects (ccaCapability), activity/statistics objects (ccaActivity, ccaGlobalStats, ccaProtocolActivity) tracking encryption throughput and protocol-specific offload activity, and a set of notifications for module lifecycle events. For hardware status monitoring, its notifications directly report physical hardware presence and health changes: ccaNotifCntlAcclInserted and ccaNotifCntlAcclRemoved signal hot-plug insertion/removal of a crypto accelerator card, while ccaNotifCntlAcclOperational and ccaNotifCntlAcclDisabled report the module transitioning to an operational or disabled fault state. The MIB's stated purpose explicitly ties its data to correlating crypto accelerator performance with the broader security services running on the device, implying a dependency on other Cisco security/VPN MIBs for full context, though it is otherwise a self-contained module. It is deployed on Cisco security appliances/routers equipped with hardware crypto acceleration cards handling IPsec/SSL encryption workloads. Engineers can download the CISCO-CRYPTO-ACCELERATOR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-CRYPTO-ACCELERATOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco security appliances/routers with hardware crypto accelerator modules

Monitoring Examples

An administrator would monitor ccaGlobalStats and ccaProtocolActivity to track encryption throughput and per-protocol offload activity on an accelerator card, watching for a drop that might indicate the hardware has fallen back to software encryption. The ccaNotifCntlAcclRemoved or ccaNotifCntlAcclDisabled notifications would immediately alert on a card being physically removed or failing, while ccaNotifCntlAcclInserted and ccaNotifCntlAcclOperational confirm a replacement module came online successfully.

What Can Be Monitored

crypto accelerator insertion/removal events
operational/disabled state
encryption throughput/activity statistics
per-protocol offload activity

Imported Objects

From CISCO-ENTITY-FRU-CONTROL-MIB

ModuleOperType

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From CISCO-TC

EntPhysicalIndexOrZero

From SNMP-FRAMEWORK-MIB

SnmpAdminString

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
TimeTicks
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using ccaGlobalInOctets OID:

Select a Cisco security appliances/routers with crypto accelerator module as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type ccaGlobalInOctets into the Find box to locate it in the OID tree, then select it and click OK. The total number of octets input to all the crypto accelerators installed in the device. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ccaAcceleratorEntry	1.3.6.1.4.1.9.9.467.1.2.2.1		not-accessible	Each entry contains the attributes and statistics of a crypto accelerator module installed on the managed device.
ccaAcceleratorTable	1.3.6.1.4.1.9.9.467.1.2.2		not-accessible	The crypto accelerator table. There is one entry in this table for each crypto accelerator installed in the managed device.
TIK ccaAcclActiveTime	1.3.6.1.4.1.9.9.467.1.2.2.1.7	TimeTicks	read-only	The number of seconds elapsed since the crypto accelerator corresponding to this row transitioned into the 'active' state.
C64 ccaAcclDecryptOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.20	Counter64	read-only	The number of octets input to this module which required decryption since the last reboot of the device.
C64 ccaAcclDecryptPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.19	Counter64	read-only	The number of packets input to this module which required decryption since the last reboot of the device.
C64 ccaAcclDHDerivedSecretKeys	1.3.6.1.4.1.9.9.467.1.2.2.1.26	Counter64	read-only	The number of times this module has derived Diffie Hellman secret keys since the last reboot of the device.
C64 ccaAcclDHKeysGenerated	1.3.6.1.4.1.9.9.467.1.2.2.1.25	Counter64	read-only	The number of Diffie Hellman key pairs generated by this module since the last reboot.
C64 ccaAcclDropsPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.22	Counter64	read-only	The number of packets input to this module which were dropped prior to processing since the last reboot of the device.
C64 ccaAcclDSAKeysGenerated	1.3.6.1.4.1.9.9.467.1.2.2.1.34	Counter64	read-only	The number of times DSA key pair has been generated by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclDSASignings	1.3.6.1.4.1.9.9.467.1.2.2.1.35	Counter64	read-only	The number of times DSA signature has been generated by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclDSAVerifications	1.3.6.1.4.1.9.9.467.1.2.2.1.36	Counter64	read-only	The number of times DSA signature has been verified by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclEncryptOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.18	Counter64	read-only	The number of octets input to this module which required encryption since the last reboot of the device.
C64 ccaAcclEncryptPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.17	Counter64	read-only	The number of packets input to this module which required encryption since the last reboot of the device.
ENT ccaAcclEntPhysicalIndex	1.3.6.1.4.1.9.9.467.1.2.2.1.2	EntPhysicalIndexOrZero	read-only	The value of entPhysicalIndex of the module corresponding to this conceptual row or zero, if the module is not an entity listed in 'entPhysicalTable' of rfc2737.
C64 ccaAcclHashInboundOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.16	Counter64	read-only	The number of octets input to this module which were authenticated using hash validation since the last reboot of the device.
C64 ccaAcclHashInboundPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.15	Counter64	read-only	The number of packets input to this module which required hash validation since the last reboot of the device.
C64 ccaAcclHashOutboundOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.14	Counter64	read-only	The number of octets output by this module which were prepared for hash validation since the last reboot of the device.
C64 ccaAcclHashOutboundPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.13	Counter64	read-only	The number of packets output by this module which were prepared for hash validation since the last reboot of the device. Hash validation is a cryptographic operation used to verify the integrity of a block of data received from a trusted source.
C64 ccaAcclInboundSSLRecords	1.3.6.1.4.1.9.9.467.1.2.2.1.38	Counter64	read-only	The number of combined inbound hash/encrypt SSL records processed by this module, counted since the last time this module assumed 'active' status.
U32 ccaAcclIndex	1.3.6.1.4.1.9.9.467.1.2.2.1.1	Unsigned32	not-accessible	The index uniquely identifying a specific crypto accelerator.
C64 ccaAcclInOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.11	Counter64	read-only	The number of octets input to this module for processing since last reboot of the device.
C64 ccaAcclInPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.8	Counter64	read-only	The number of packets input to this module for processing since the last reboot of the device.
C64 ccaAcclOutBadPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.10	Counter64	read-only	The number of packets output by this module after processing which had crypto errors, since last reboot of the device.
C64 ccaAcclOutboundSSLRecords	1.3.6.1.4.1.9.9.467.1.2.2.1.37	Counter64	read-only	The number of combined outbound hash/encrypt SSL records processed by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclOutOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.12	Counter64	read-only	The number of octets output by this module after processing since last reboot of the device.
C64 ccaAcclOutPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.9	Counter64	read-only	The number of packets output by this module after processing, since last reboot of the device.
C64 ccaAcclRandReqFails	1.3.6.1.4.1.9.9.467.1.2.2.1.24	Counter64	read-only	The number of random number requests received by this module which were not fulfilled, counted since the last reboot of the device.
C64 ccaAcclRandRequests	1.3.6.1.4.1.9.9.467.1.2.2.1.23	Counter64	read-only	The number of requests received by this crypto accelerator to generate random numbers since the last reboot of the device.
C64 ccaAcclRSADecryptOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.33	Counter64	read-only	The number of octets input to this module which required RSA decryption, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSADecryptPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.32	Counter64	read-only	The number of packets input to this module which required RSA decryption, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSAEncryptOctets	1.3.6.1.4.1.9.9.467.1.2.2.1.31	Counter64	read-only	The number of octets input to this module which required RSA encryption, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSAEncryptPkts	1.3.6.1.4.1.9.9.467.1.2.2.1.30	Counter64	read-only	The number of packets input to this module which required RSA encryption, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSAKeysGenerated	1.3.6.1.4.1.9.9.467.1.2.2.1.27	Counter64	read-only	The number of times a new RSA key pair was generated by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSASignings	1.3.6.1.4.1.9.9.467.1.2.2.1.28	Counter64	read-only	The number of times an RSA Digital Signature has been generated by this module, counted since the last time this module assumed 'active' status.
C64 ccaAcclRSAVerifications	1.3.6.1.4.1.9.9.467.1.2.2.1.29	Counter64	read-only	The number of times an RSA Digital Signature has been verified by this module, counted since the last time this module assumed 'active' status.
U32 ccaAcclSlot	1.3.6.1.4.1.9.9.467.1.2.2.1.6	Unsigned32	read-only	The slot number of the crypto accelerator corresponding to this row.
MOD ccaAcclStatus	1.3.6.1.4.1.9.9.467.1.2.2.1.3	ModuleOperType	read-only	The state of the crypto accelerator corresponding to this row.
C64 ccaAcclTransformsTotal	1.3.6.1.4.1.9.9.467.1.2.2.1.21	Counter64	read-only	The number of cryptographic transformations performed by this crypto accelerator since the last reboot of the device.
CAM ccaAcclType	1.3.6.1.4.1.9.9.467.1.2.2.1.4	CAModuleType	read-only	The type of the crypto accelerator corresponding to this row.
STR ccaAcclVersion	1.3.6.1.4.1.9.9.467.1.2.2.1.5	SnmpAdminString	read-only	The version string of the firmware of the crypto accelerator corresponding to this row.
ccaAcNotifCntl	1.3.6.1.4.1.9.9.467.1.3
ccaActivity	1.3.6.1.4.1.9.9.467.1.2
ccaCapability	1.3.6.1.4.1.9.9.467.1.1
C64 ccaGlobalInOctetsEx	1.3.6.1.4.1.9.9.467.1.2.1.3	Counter64	read-only	The total number of octets input to all the crypto accelerators installed in the device. The value is cumulative from last reboot of the managed entity.
C64 ccaGlobalInPkts	1.3.6.1.4.1.9.9.467.1.2.1.5	Counter64	read-only	The total number of packets input to all the crypto accelerators installed in the device. The value is cumulative from last reboot of the managed entity.
CAM ccaGlobalNumActiveAccelerators	1.3.6.1.4.1.9.9.467.1.2.1.1	CAModuleCount	read-only	The number of crypto accelerators which are in state 'active'.
CAM ccaGlobalNumNonOperAccelerators	1.3.6.1.4.1.9.9.467.1.2.1.2	CAModuleCount	read-only	The number of crypto accelerators which are in a state other than 'active'.
C64 ccaGlobalOutErrPkts	1.3.6.1.4.1.9.9.467.1.2.1.7	Counter64	read-only	The total number of packets output by all the crypto accelerators installed in the device which were found to be generated with errors (checksum errors, other errors). The value is cumulative from last reboot of the managed entity.
C64 ccaGlobalOutOctets	1.3.6.1.4.1.9.9.467.1.2.1.4	Counter64	read-only	The total number of octets output by all the crypto accelerators installed in the device. The value is cumulative from last reboot of the managed entity.
C64 ccaGlobalOutPkts	1.3.6.1.4.1.9.9.467.1.2.1.6	Counter64	read-only	The total number of packets output by all the crypto accelerators installed in the device. The value is cumulative from last reboot of the managed entity.
ccaGlobalStats	1.3.6.1.4.1.9.9.467.1.2.1
I32 ccaMaxAccelerators	1.3.6.1.4.1.9.9.467.1.1.3	Integer32	read-only	The maximum number of hardware crypto accelerators which may be simultaneously operational in this device. If the managed device can support only software encryption, the value of this MIB object should be set to zero. If there is not set limit on the maximum number of crypto accelerator modules which the managed device can support, the agent should return a value of '-1' for this MIB variable.
U32 ccaMaxCryptoConnections	1.3.6.1.4.1.9.9.467.1.1.5	Unsigned32	read-only	The maximum number of VPN flows (connections) the managed device can support with the current number of active crypto accelerators. If this value cannot be determined, the agent should return a value of 0.
U32 ccaMaxCryptoThroughput	1.3.6.1.4.1.9.9.467.1.1.4	Unsigned32	read-only	The maximum crypto throughput that may be supported by the managed device with the current number of active crypto accelerators. If this value cannot be determined, the agent should return a value of 0.
T/F ccaNotifCntlAcclDisabled	1.3.6.1.4.1.9.9.467.1.3.4	TruthValue	read-write	This variable controls the generation of 'ciscoCryAccelDisabled' notification. When this variable is set to 'true', generation of the notification is enabled. When this variable is set to 'false', generation of the notification is disabled.
T/F ccaNotifCntlAcclInserted	1.3.6.1.4.1.9.9.467.1.3.1	TruthValue	read-write	This variable controls the generation of 'ciscoCryAccelInserted' notification. When this variable is set to 'true', generation of the notification is enabled. When this variable is set to 'false', generation of the notification is disabled.
T/F ccaNotifCntlAcclOperational	1.3.6.1.4.1.9.9.467.1.3.3	TruthValue	read-write	This variable controls the generation of 'ciscoCryAccelOperational' notification. When this variable is set to 'true', generation of the notification is enabled. When this variable is set to 'false', generation of the notification is disabled.
T/F ccaNotifCntlAcclRemoved	1.3.6.1.4.1.9.9.467.1.3.2	TruthValue	read-write	This variable controls the generation of 'ciscoCryAccelRemoved' notification. When this variable is set to 'true', generation of the notification is enabled. When this variable is set to 'false', generation of the notification is disabled.
C64 ccaProtFailedReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.12	Counter64	read-only	The number of times requests received from this security protocol could not be fulfilled, counted since the last reboot of the device.
C64 ccaProtHmacCalcReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.4	Counter64	read-only	The number of times keyed HMAC calculation requests were received by the crypto accelerators due to the operation of this security protocol, counted since the last reboot of the device.
CAP ccaProtId	1.3.6.1.4.1.9.9.467.1.2.3.1.1.1	CAProtocolType	not-accessible	The index uniquely identifies the security protocol for which this row summarizes the statistics.
C64 ccaProtNextPhaseKeyAllocReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.10	Counter64	read-only	The number of times requests for allocation of keys for the next phase of the protocol operation which were received by the crypto accelerators from this security protocol, counted since the last reboot of the device. As an example, for IKE, this would identify the number of times key allocation requests for Quick Mode were received by the crypto accelerator from the IKE protocol engine.
ccaProtocolActivity	1.3.6.1.4.1.9.9.467.1.2.3
ccaProtocolStatsEntry	1.3.6.1.4.1.9.9.467.1.2.3.1.1		not-accessible	Each entry contains the statistics corresponding to a specific security protocol.
ccaProtocolStatsTable	1.3.6.1.4.1.9.9.467.1.2.3.1		not-accessible	The crypto accelerator statistics catalogued by security protocol causing the activity. There is only entry in this table for each security protocol listed in the textual convention 'CAProtocolType'.
C64 ccaProtPktDecapReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.9	Counter64	read-only	The number of times requests for payload decapsulation were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtPktDecryptsReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.3	Counter64	read-only	The number of payload decrypt requests received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtPktEncapReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.8	Counter64	read-only	The number of times requests for payload encapsulation were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtPktEncryptsReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.2	Counter64	read-only	The number of payload encrypt requests received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtRndGenReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.11	Counter64	read-only	The number of times requests for generation of random number(s) were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtSaCreateReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.5	Counter64	read-only	The number of times requests for creation of security associations were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtSaDeleteReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.7	Counter64	read-only	The number of times requests for deletion of security associations were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
C64 ccaProtSaRekeyReqs	1.3.6.1.4.1.9.9.467.1.2.3.1.1.6	Counter64	read-only	The number of times requests for rekeying of existing security associations were received by the crypto accelerators from this security protocol, counted since the last reboot of the device.
T/F ccaSupportsHwCrypto	1.3.6.1.4.1.9.9.467.1.1.1	TruthValue	read-only	This MIB object assumes the value of True if the managed device is capable of including hardware crypto accelerator.
T/F ccaSupportsModularHwCrypto	1.3.6.1.4.1.9.9.467.1.1.2	TruthValue	read-only	This MIB object assumes the value of True if the managed device supports field removable hardware crypto accelerators.
ciscoCryAccCapacityGroup	1.3.6.1.4.1.9.9.467.2.2.1			This group consists of all the MIB variables defined under crAcCapacity using which the management station may determine the limits of capacity of the managed device with regards to the support of crypto accelerators.
NTF ciscoCryAccelDisabled	1.3.6.1.4.1.9.9.467.0.4			A crypto accelerator module has become non-operational.
ciscoCryAcceleratorMIBNotifs	1.3.6.1.4.1.9.9.467.0
ciscoCryAcceleratorMIBObjects	1.3.6.1.4.1.9.9.467.1
NTF ciscoCryAccelInserted	1.3.6.1.4.1.9.9.467.0.1			A crypto accelerator module has been inserted into the managed device.
ciscoCryAccelMIBCompliance	1.3.6.1.4.1.9.9.467.2.1.1			The compliance statement for entities which implement the CISCO Crypto Accelerator MIB.
ciscoCryAccelMIBCompliances	1.3.6.1.4.1.9.9.467.2.1
ciscoCryAccelMIBGroups	1.3.6.1.4.1.9.9.467.2.2
NTF ciscoCryAccelOperational	1.3.6.1.4.1.9.9.467.0.3			A crypto accelerator module has become operational.
NTF ciscoCryAccelRemoved	1.3.6.1.4.1.9.9.467.0.2			A crypto accelerator module has been removed from the managed device.
ciscoCryAccleratorMIBConform	1.3.6.1.4.1.9.9.467.2
ciscoCryAccModuleActivityGroup	1.3.6.1.4.1.9.9.467.2.2.3			This group consists of the counters which model the summary activity of the crypto accelerators in the managed entity. Following are definitions of some terms used in this compliance group: Crypto Accelerator 'Crypto Accelerator' denotes a hardware or software device which the managed entity uses to offload some or all computations pertaining to cryptographic operations. A crypto accelerator module may be implemented as a Field Removable Unit or an integrated hardware element such an Application Specific Integrated Chip (ASIC). Module The term 'Module' has been used in this MIB to denote a hardware crypto accelerator. Diffie-Hellman The Diffie-Hellman key agreement protocol (also called exponential key agreement) was developed by Diffie and Hellman in 1976. The protocol allows two users to exchange a secret key over an insecure medium without any prior secrets. RSA An Internet encryption and authentication system that uses an algorithm developed in 1977 by Ron Rivest, Adi Shamir, and Leonard Adleman. DSS Digital Signature Standard (DSS) is the digital signature algorithm (DSA) developed by the U.S. National Security Agency (NSA) to generate a digital signature for the authentication of electronic documents. IPsec IP security protocol. SSL Secure Socket Layer Protocol. SSH Secure Shell Protocol. PKI Public Key Infrastructure
ciscoCryAccNotifsCntlGroup	1.3.6.1.4.1.9.9.467.2.2.5			This group consists of all the MIB variables which allow the network management station to control the emission of the notifications defined in this MIB. Per a different compliance clause dfined in this module, the agent is not required to provide write access to these MIB variables.
ciscoCryAccNotifsGroup	1.3.6.1.4.1.9.9.467.2.2.6			This group consists of all the notifications defined to signal the change in status and operation of crypto accelerator modules.
ciscoCryAccProtocolActivityGroup	1.3.6.1.4.1.9.9.467.2.2.4			This group consists of the counters which model the protocol-specific activity of the crypto accelerators in the managed entity.
ciscoCryAccSummaryActivityGroup	1.3.6.1.4.1.9.9.467.2.2.2			This group consists of the counters which model the summary activity of the crypto accelerators in the managed entity.
ciscoCryptoAcceleratorMIB	1.3.6.1.4.1.9.9.467			The MIB module for monitoring the identity, status, activity and faults of crypto accelerator (CA) modules used in devices implementing security services. The purpose of this MIB is to facilitate the following: 1) facilitate the discovery of hardware crypto accelerator modules installed in a security device 2) monitor the activity, faults and performance of hardware crypto accelerators and help the Network Management Station (NMS) correlate the performance of the CA modules with that of the security services (IPsec, SSL, SSH, PKI etc) using the modules.

RFC description

Cisco MIB module that instruments the identity, status, activity, and faults of hardware crypto accelerator modules used in security devices implementing IPsec, SSL, SSH, and PKI services.

Start monitoring Cisco security appliances/routers with crypto accelerator modules with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-CRYPTO-ACCELERATOR-MIB